The keys given on the web site are uptodate. Verifying a tarblall made with the
old key will tell you that this key has expired, but this does not reflect on
the validity of the signature. It is common to have a file signed by an expired
key when verifying it later.

The key is available at all keyservers, so there is actually no need to publish
it on the website. We do it anyway for documentation reasons.